CVE-2026-15205

The vulnerability CVE-2026-15205 affects the Paymob for WooCommerce WordPress plugin prior to version 4.1.9. In the public, unauthenticated payment callback, the plugin fails to properly sanitize a client-supplied identifier before including it in a SQL query and performs this query before valida...